CVE-2020-4187: 
IBM Guardium Appliance vulnerability analysis and mitigation

CVE-2020-4187 is a security vulnerability discovered in IBM Security Guardium versions 10.5, 10.6, 11.0, and 11.1. The vulnerability involves the potential disclosure of sensitive information on the login page that could be leveraged for further system attacks (IBM Support).

The vulnerability has been assigned a CVSS Base score of 5.3 with the following vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. This indicates that the vulnerability is network accessible, requires low attack complexity, needs no privileges, requires no user interaction, has a low confidentiality impact, and no impact on integrity or availability (IBM Support).

The vulnerability could lead to the disclosure of sensitive information through the login page, which attackers could potentially use to conduct further attacks against the system (IBM Support).

IBM has released fixes for all affected versions. Patches are available through IBM Fix Central for Security Guardium versions 10.5 (SqlGuard_10.0p535_Bundle), 10.6 (SqlGuard_10.0p650_Bundle), 11.0 (SqlGuard_11.0p30_Bundle), and 11.1 (SqlGuard_11.0p115_Bundle). No workarounds or alternative mitigations have been identified (IBM Support).

The vulnerability was discovered and reported by the IBM X-Force Ethical Hacking Team members Jonathan Fitz-Gerald, John Zuccato, Rodney Ryan, Chris Shepherd, Nathan Roane, Kamil Sarbinowski, Vince Dragnea and Troy Fisher (IBM Support).